Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/700df3-e9a0-453b-bf8a-2fb68ac54e01/1/TPehrkNJcgwwZPZnm1m_SBvJwIA.roa
File: TPehrkNJcgwwZPZnm1m_SBvJwIA.roa (raw, json)
Hash identifier: IX8z3/g3djiER/mkYtnGPHUub+p4ZLxIzo/9WuMd8PM=
Subject key identifier: 4C:F7:A1:AE:43:49:72:0C:30:64:F6:67:9B:59:BF:48:1B:C9:C0:80
Certificate issuer: /CN=4131d1ddb6a355d93ccede3e2c1a38d949d1683e
Certificate serial: 01893000ECEF81CC6C315F3E7E99292D651D
Authority key identifier: 41:31:D1:DD:B6:A3:55:D9:3C:CE:DE:3E:2C:1A:38:D9:49:D1:68:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTHR3bajVdk8zt4-LBo42UnRaD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/700df3-e9a0-453b-bf8a-2fb68ac54e01/1/TPehrkNJcgwwZPZnm1m_SBvJwIA.roa
Signing time: Fri 07 Jul 2023 10:58:34 +0000
ROA not before: Fri 07 Jul 2023 10:58:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.106.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:00:ec:ef:81:cc:6c:31:5f:3e:7e:99:29:2d:65:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4131d1ddb6a355d93ccede3e2c1a38d949d1683e
Validity
Not Before: Jul 7 10:58:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cf7a1ae4349720c3064f6679b59bf481bc9c080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:aa:33:b6:42:9e:4e:35:af:00:8f:e9:b4:
4b:65:7a:eb:ac:5b:ab:34:16:7e:26:fe:90:00:6d:
72:82:84:07:1b:81:2a:9a:44:b4:6f:8e:ab:72:48:
bf:5b:31:36:aa:51:dc:18:f6:c8:a3:a1:11:b9:57:
2c:96:26:47:f5:a8:a6:6f:f7:72:60:f8:b2:d7:1c:
c7:f9:55:43:b5:42:43:37:da:6e:01:01:4a:8c:f6:
d1:56:56:87:00:e4:20:f2:f5:d7:a5:d5:96:43:cd:
22:35:60:8a:9f:70:33:65:05:95:3d:bc:11:b5:f2:
c8:7f:7d:70:83:90:b6:b4:0d:86:ec:33:52:48:a6:
99:ef:7a:d6:6a:a9:1d:33:1b:32:2e:55:4a:c1:8b:
d9:e2:df:2b:c8:fd:e1:0a:5b:bf:7a:35:3c:93:bd:
5a:54:66:71:a4:fa:9d:34:61:4a:f0:86:e3:43:99:
0c:30:d5:2e:e0:83:57:bf:4e:ab:b0:17:84:fa:5d:
fc:dd:31:1c:b1:8f:5f:52:92:d4:b2:aa:d4:df:12:
88:ea:20:e3:e9:86:da:dc:de:b1:8d:8e:66:e7:ba:
8c:14:19:c3:dd:1d:ca:37:a3:e5:20:2d:97:e5:30:
ae:5f:c8:49:24:a3:35:f1:77:d5:59:9a:34:1e:27:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F7:A1:AE:43:49:72:0C:30:64:F6:67:9B:59:BF:48:1B:C9:C0:80
X509v3 Authority Key Identifier:
keyid:41:31:D1:DD:B6:A3:55:D9:3C:CE:DE:3E:2C:1A:38:D9:49:D1:68:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTHR3bajVdk8zt4-LBo42UnRaD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/700df3-e9a0-453b-bf8a-2fb68ac54e01/1/TPehrkNJcgwwZPZnm1m_SBvJwIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/700df3-e9a0-453b-bf8a-2fb68ac54e01/1/QTHR3bajVdk8zt4-LBo42UnRaD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.66.0/24
Signature Algorithm: sha256WithRSAEncryption
46:57:cb:1f:1f:1d:85:92:de:02:dc:98:44:fe:f4:98:91:f0:
07:c7:9b:97:70:38:81:c3:af:69:af:16:3e:74:2d:fc:96:5f:
8e:a5:ef:db:a1:a7:78:84:24:c6:49:7a:aa:76:03:f8:25:20:
40:94:76:e3:60:db:1c:51:3e:a5:09:fe:70:b5:07:e3:a9:7c:
cb:c7:d8:70:a5:a3:40:11:3a:d4:56:05:7a:e4:98:30:a3:c3:
dd:6b:75:d3:14:be:48:6a:7b:a5:11:a0:90:d8:a8:f2:76:69:
08:11:7b:68:d2:30:d4:97:a6:ad:91:62:16:97:e9:de:c9:21:
17:c0:4c:78:f0:b8:3f:3b:dd:85:6b:a9:56:fb:e4:ab:ac:a0:
b8:7c:28:e3:c0:17:83:45:d7:c8:c6:77:4b:c4:ee:20:29:a7:
74:f4:c8:eb:f8:41:3a:2c:1f:ed:95:69:67:e1:78:45:a9:f2:
e1:a9:c3:b5:a1:41:8d:c7:3b:6d:6f:2c:40:cd:35:84:dc:5c:
f2:b7:7e:8f:88:dc:d7:45:d2:d6:5c:78:23:fb:4d:fa:aa:4c:
9f:0a:e5:44:d8:2b:73:33:67:7e:d0:74:cc:82:2f:b2:bd:78:
e8:e1:f6:50:c2:e4:34:cd:dd:47:56:05:50:a7:a1:c7:b7:b7:
5d:a7:a1:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkwAOzvgcxsMV8+fpkpLWUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMzFkMWRkYjZhMzU1ZDkzY2NlZGUzZTJjMWEzOGQ5NDlk
MTY4M2UwHhcNMjMwNzA3MTA1ODM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2Y3YTFhZTQzNDk3MjBjMzA2NGY2Njc5YjU5YmY0ODFiYzljMDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g+qM7ZCnk41rwCP6bRLZXrrrFur
NBZ+Jv6QAG1ygoQHG4EqmkS0b46rcki/WzE2qlHcGPbIo6ERuVcsliZH9aimb/dy
YPiy1xzH+VVDtUJDN9puAQFKjPbRVlaHAOQg8vXXpdWWQ80iNWCKn3AzZQWVPbwR
tfLIf31wg5C2tA2G7DNSSKaZ73rWaqkdMxsyLlVKwYvZ4t8ryP3hClu/ejU8k71a
VGZxpPqdNGFK8IbjQ5kMMNUu4INXv06rsBeE+l383TEcsY9fUpLUsqrU3xKI6iDj
6Yba3N6xjY5m57qMFBnD3R3KN6PlIC2X5TCuX8hJJKM18XfVWZo0Hif1mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEz3oa5DSXIMMGT2Z5tZv0gbycCAMB8GA1UdIwQY
MBaAFEEx0d22o1XZPM7ePiwaONlJ0Wg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRIUjNiYWpWZGs4enQ0LUxCbzQyVW5SYUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83MDBkZjMtZTlhMC00NTNiLWJmOGEt
MmZiNjhhYzU0ZTAxLzEvVFBlaHJrTkpjZ3d3WlBabm0xbV9TQnZKd0lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83MDBkZjMtZTlhMC00NTNiLWJmOGEtMmZiNjhhYzU0ZTAx
LzEvUVRIUjNiYWpWZGs4enQ0LUxCbzQyVW5SYUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmpCMA0G
CSqGSIb3DQEBCwUAA4IBAQBGV8sfHx2Fkt4C3JhE/vSYkfAHx5uXcDiBw69prxY+
dC38ll+Ope/boad4hCTGSXqqdgP4JSBAlHbjYNscUT6lCf5wtQfjqXzLx9hwpaNA
ETrUVgV65Jgwo8Pda3XTFL5IanulEaCQ2KjydmkIEXto0jDUl6atkWIWl+neySEX
wEx48Lg/O92Fa6lW++SrrKC4fCjjwBeDRdfIxndLxO4gKad09Mjr+EE6LB/tlWln
4XhFqfLhqcO1oUGNxzttbyxAzTWE3Fzyt36PiNzXRdLWXHgj+036qkyfCuVE2Ctz
M2d+0HTMgi+yvXjo4fZQwuQ0zd1HVgVQp6HHt7ddp6G0
-----END CERTIFICATE-----
Generated at Tue Oct 10 06:33:17 2023 by rpki-client on console-fra.rpki-client.org